cwinq

3 karma · joined March 10, 2021

cwinq··on Show HN: Local Privacy Firewall-blocks PII and secrets before ChatGPT sees them

You can try GitGuardian, it is very powerful and free for individual developers and small teams. It has precommit hooks, detection in IDE and all.

cwinq··on Ask HN: Prevent Secrets from Committing to Repos

How big is your team? GitGuardian is free for team below 25 dev. And it will make sure secrets don't make it to your code and highlight any historical leaks too.

cwinq··on Why ChatGPT is a security concern for your organization-even if you don't use it

ChatGPT may not be used by all organizations and may even be banned. But that doesn't mean you don't have exposure to the security risks it contains. This post looks at why ChatGPT should be part of your threat landscape.

cwinq··on Dropbox admits 130 of its private GitHub repos were copied after phishing attack

some details on this breach: https://blog.gitguardian.com/dropbox-breach-hack-github-circ...

cwinq··on Toyota suffered a data breach by accidentally exposing a secret key on GitHub

Well, GitGuardian is free for individual developers (20 K of them use it - n°1 app on GitHub market place) and for team below 25. So I guess the masses can enjoy secrets free code! https://github.com/marketplace/gitguardian

cwinq··on Toyota suffered a data breach by accidentally exposing a secret key on GitHub

you can try ggshield - https://github.com/GitGuardian/ggshield -

cwinq··on Toyota suffered a data breach by accidentally exposing a secret key on GitHub

You can definitely use pre commit hooks for this like the one of ggshield https://github.com/GitGuardian/ggshield - remediation is far quicker when the secret does't make it to the codebase!

cwinq··on Secrets: A command-line tool to prevent committing secret keys into your source

you may also want to look at ggshield: https://github.com/GitGuardian/ggshield